CVE-2026-101879

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

CVE-2026-101879

OpenClaw Windows Node versions prior to 2026.7.1-3 are vulnerable to a missing authorization flaw within the NodeService capture handlers. This security weakness allows connected gateways or agents to bypass consent prompts and perform unauthorized actions by invoking screen.snapshot , camera.sna...